This vulnerability involves a use-after-free condition in the Fullscreen feature of Google Chrome before version 148.0.7778.96. Exploitation could enable a remote attacker to perform a sandbox escape, which is a significant security risk as it may allow code execution outside the browser's restricted environment. The issue was publicly disclosed on May 6, 2026, with a high severity rating by Chromium security. No CVSS score or explicit remediation level is provided in the source data. The vendor advisory URL points to a stable channel update announcement but does not specifically confirm a fix for this vulnerability.

If exploited, this vulnerability could allow a remote attacker to escape the Chrome sandbox, potentially leading to execution of arbitrary code with elevated privileges. This could compromise the security boundaries normally enforced by the browser, increasing the risk to the affected system. There are no known exploits in the wild at the time of this report.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop.html for current remediation guidance. Users should update to Chrome version 148.0.7778.96 or later once confirmed. Until then, avoid visiting untrusted or suspicious websites that might trigger this vulnerability.